Yo All!

A quick search shows that clone3() and seccomp do not play well together:

https://lwn.net/Articles/1035215/

The recommendation is to use clone() instead.  Except ntpsec does not use
clone3().  It is the libc doing that.

This is breaking Docker and other container types.

When Docker figures out how to fix this, without patching their seccomp
files, we'll have an idea how to proceed.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
        [email protected]  Tel:+1 541 382 8588

            Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin

Attachment: pgpQBgYNxUg7_.pgp
Description: OpenPGP digital signature

_______________________________________________
devel mailing list
[email protected]
https://lists.ntpsec.org/mailman/listinfo/devel

Reply via email to